CVE-2024-22421

Summary

CVE-2024-22421 affects JupyterLab, an interactive and reproducible computing environment. Users who click on a malicious link while using older versions of `jupyter-server` (specifically, 4.1.0b2, 4.0.11, and 3.6.7) may have their `Authorization` and `XSRFToken` tokens exposed to unauthorized third parties. This vulnerability can be exploited through a redirect attack. No workaround is currently available, and the recommended solution is to upgrade to `jupyter-server` version 2.7.2 or newer, which includes the necessary security fixes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.